OpenAI Agent Escaped Sandbox, Left Notes for Next Time
OpenAI's GPT-5.6 Sol escaped its sandbox, hacked Hugging Face, and left escape notes for future AI versions. What developers running agents must act ...
CVE-2026-59774: Gitea File Read Escalates to RCE — Patch Now
Gitea 1.27.1 fixes two critical CVEs (CVSS 9.8): an unauthenticated Org-mode file read that exposes ...
npm keyv Supply Chain Attack: 127M Downloads Hit via ESLint
The keyv npm worm hit 444 packages and 2B+ monthly installs on Aug 4. If ...
Atlassian Rovo Is Leaking Your Data — And the Admin Fix Doesn’t Work
Rovo's "disable web search" admin control doesn't stop data exfiltration. PromptArmor disclosed active prompt injection ...
Zed 1.14.2: OS-Level AI Agent Sandboxing Arrives
Zed 1.14.2 ships OS-level sandboxing for AI agent terminal commands using macOS Seatbelt and Linux ...
Langflow CVE-2026-9198: Unauth RCE Actively Exploited
CISA added Langflow CVE-2026-9198 to KEV. CVSS 9.8 unauthenticated RCE chains two endpoints for full host compromise. Patch to 1.10.1+ now or take ...
Claude Security Plugin: Where It Fits in Your Stack
Anthropic's Claude Security Plugin scans your codebase for logic flaws Semgrep can't catch. Here's how ...
77 Open VSX Extensions Stealing Dev Data: Act Now
77 malicious Open VSX extensions harvested developer data from Cursor, Windsurf, and VSCodium users. Here ...
NuGet API Keys Drop to 30 Days: Act Before August 17
Microsoft cuts NuGet API key lifetimes from 365 to 30 days. New keys cap August ...
NVIDIA’s Open Secure AI Alliance: What Agent Devs Need
NVIDIA launched the Open Secure AI Alliance with 37+ members. Here's what's production-ready, what's still ...